rundll32
Static task
static1
Behavioral task
behavioral1
Sample
10ce86cd157c6a4a114fa20aa8044a40_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10ce86cd157c6a4a114fa20aa8044a40_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
10ce86cd157c6a4a114fa20aa8044a40_JaffaCakes118
-
Size
6KB
-
MD5
10ce86cd157c6a4a114fa20aa8044a40
-
SHA1
8b1243a341725cb388c2f37489dfe642350222da
-
SHA256
24042c4347719a2b89f62ba7c15852aa074fb18b5fd5268f6745c370fd84b74b
-
SHA512
30d3255f31ee70910d296fe47fd86c73f5c99601640af3e73d92954dd43d2f792252e7d6319c6173c033a4a58d865d7bac1a1cb4e6b6f15ca19319ac881747ce
-
SSDEEP
96:z0dpglt6eGE0ws3Qpr7+9hDGb97x8MjHewA:/x0/Ap/QeP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10ce86cd157c6a4a114fa20aa8044a40_JaffaCakes118
Files
-
10ce86cd157c6a4a114fa20aa8044a40_JaffaCakes118.dll windows:5 windows x86 arch:x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 349B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ